mirror of https://github.com/ghndrx/terraform-foundation.git synced 2026-02-10 06:45:06 +00:00

Files

Greg Hendrickson 6136cde9bb feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center

2026-02-02 02:57:23 +00:00

main.tf

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

README.md

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

README.md

route53-zone

Route53 Zone Module

Usage

module "route53_zone" {
  source = "../modules/route53-zone"
  
  # Required variables
  domain_name = ""
  records = ""
  alias_records = ""
  mx_records = ""

  # Optional: see variables.tf for all options
}

Requirements

Name	Version
terraform	>= 1.5.0
aws	>= 5.0

Inputs

Name	Description	Type	Required
domain_name	Domain name for the hosted zone	`string`	yes
comment	Comment for the hosted zone	`string`	no
private_zone	Create a private hosted zone	`bool`	no
vpc_ids	VPC IDs to associate with private zone	`list(string)`	no
enable_dnssec	Enable DNSSEC signing	`bool`	no
enable_query_logging	Enable query logging to CloudWatch	`bool`	no
query_log_retention_days	Query log retention in days	`number`	no
records		`map(object({`	yes
alias_records		`map(object({`	yes
mx_records		`list(object({`	yes
txt_records		`map(string)`	no
tags		`map(string)`	no

Outputs

Name	Description
zone_id	Hosted zone ID
zone_arn	Hosted zone ARN
name_servers	Name servers for the zone (update at registrar)
domain_name	Domain name
dnssec_ds_record	DS record for DNSSEC (add to parent zone/registrar)

License

Apache 2.0 - See LICENSE for details.